Age | Commit message (Collapse) | Author | |
---|---|---|---|
2003-07-29 | Big Sync | Cedric Berger | |
2003-01-19 | Labels are quoted in rule output now. | Camiel Dobbelaar | |
2002-12-05 | no more rule numbers in output | Henning Brauer | |
2002-11-22 | there's now a space after the label... | Henning Brauer | |
no cookie for daniel ;-) | |||
2002-10-05 | Expand {} lists from left to right, so 'pass in from { a, b } to any' | Daniel Hartmeier | |
becomes '@0 pass in from a to any @1 pass in from b to any' instead of the other way around. Patch from Camiel Dobbelaar. | |||
2002-06-08 | regression test from $srcaddr & friends in rule labels | Henning Brauer | |
ok dhartmei@ | |||
2002-04-24 | Add dynamic (in-kernel) interface name -> address translation. Instead of | Daniel Hartmeier | |
using just the interface name instead of an address and reloading the rule set whenever the interface changes its address, the interface name can be put in parentheses, and the kernel will keep track of changes and update rules. There is no additional cost for evaluating rules (per packet), the cost occurs when an interface changes address (and the rules are traversed and updated where necessary). | |||
2002-02-27 | And adjust regress tests to match the rule number output. | Daniel Hartmeier | |
2002-01-09 | Add tests for 'no' translation rules and 'label' in filter rules. | Daniel Hartmeier | |
2001-10-15 | Add 'allow-opts' to rules. Packets with IP options will be blocked by | Daniel Hartmeier | |
default now, and can be allowed per rule. ok deraadt@ | |||
2001-09-15 | Update regress tests. Some input syntax has changed (inet/inet6) as well | Daniel Hartmeier | |
as some output format (netmasks, inet/inet6, return-icmp). | |||
2001-09-03 | sync with output format changes (pfctl) | Markus Friedl | |
2001-07-26 | initial tests for the pfctl parser | Markus Friedl | |